197 matches found
SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70835)
Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...
File upload vulnerability in the comprehensive management platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd (CNVD-2020-70800)
Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A file upload vulnerability exists in the comprehensive management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to gain server...
2021 Detection and Response Planning, Part 2: Driving SOC Efficiency With a Detections-First Approach to SIEM
This is the second installment of our series around 2021 security planning. In part one, Rapid7 Detection and Response Practice Advisor Jeffrey Gardner offered tips and advice for ramping up annual security planning. In this installment, we’ll explore the importance of reliable and comprehensive...
CVE-2020-23829
interface/new/newcomprehensivesave.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution RCE on the hosting webserver by uploading a maliciously crafted image...
SQL Injection Vulnerability in Livestock Comprehensive Management Information Platform of Xinjiang Uygur Autonomous Region Bureau of Animal Husbandry and Veterinary Medicine
The Bureau of Animal Husbandry and Veterinary Medicine of the Xinjiang Uygur Autonomous Region is responsible for the supervision and management of the animal husbandry industry, veterinary drugs and veterinary instruments industry, feed and forage industry, and livestock and poultry slaughtering...
mobilityonetransportation.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1162912 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Microsoft Brings Defender Antivirus for Linux, Coming Soon for Android and iOS
Almost within a year after releasing Microsoft Defender Advanced Threat Protection ATP for macOS computers, Microsoft today announced a public preview of its antivirus software for various Linux distributions, including Ubuntu, RHEL, CentOS and Debian. If this news hasn't gotten you excited yet...
State & Local Governments: The Cyberinsurgency Spreads
Today’s world is dramatically different than even five years ago. Ransomware attacks, which used to make global headlines, are now commonplace. Cybercriminals—who have historically targeted large enterprises—are now also setting their sights on state and local governments. New, sophisticated...
suspanish.com Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8584 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting suspanish.com website and its users. Following coordinated...
Businesses Will Buy Down Risk With Defense-in-Depth – 2020 Trend #5
As 2019 came to an end, Imperva CTO Kunal Anand began working with our global research team, Imperva Labs, to put together a list of the most important cybersecurity issues security leaders should be prepared for in 2020. He published his list in the blog, “Top 5 Cybersecurity Trends to Prepare f...
Microsoft Security—a Leader in 5 Gartner Magic Quadrants
Gartner has named Microsoft Security a Leader in five Magic Quadrants. This is exciting news that we believe speaks to the breadth and depth of our security offerings. Gartner places vendors as Leaders who demonstrate balanced progress and effort in all execution and vision categories. This means...
The Comprehensive Compliance Guide (Get Assessment Templates)
Complying with cyber regulations forms a significant portion of the CISO's responsibility. Compliance is, in fact, one of the major drivers in the purchase and implementation of new security products. But regulations come in multiple different colors and shapes – some are tailored to a specific...
ICT Supply-Chain Security
The Carnegie Endowment for Peace published a comprehensive report on ICT information and communication technologies supply-chain security and integrity. It's a good read, but nothing that those who are following this issue don't already know...
Partner Perspectives: Stop Advanced Cyber Threats with End-to-End Protection from ThreatWarrior and Carbon Black
Today’s rapidly advancing technology and our “constantly connected” mindset have given rise to a malicious underworld of sophisticated cybercriminals and constantly-evolving cyberattacks. Understanding these new forms of attack, predicting strikes, and responding quickly is the only way to defend...
Russian APT Map Reveals 22,000 Connections Between 2000 Malware Samples
Though Russia still has an undiversified and stagnant economy, it was one of the early countries in the world to realize the value of remotely conducted cyber intrusions. In recent years, many Russia hacking groups have emerged as one of the most sophisticated nation-state actors in cyberspace,...
Partner Perspectives: Endpoint Protection & Asset Management: Making Sure Everything That Should Be Protected, Is Protected
It’s a common refrain in cybersecurity: you can only protect what you can see. And while advances in endpoint protection technology have drastically increased the security of devices, organizations still struggle to understand which assets they have, and whether they’re properly covered by securi...
Acunetix Vulnerability Scanner Now With Network Security Scans
User-friendly and competitively priced, Acunetix leads the market in automatic web security testing technology. Its industry-leading crawler fully supports HTML5, JavaScript, and AJAX-heavy websites, enabling the auditing of complex, authenticated applications. Acunetix provides the only technolo...
Top 10 Benefits that Make Upgrading to the PSC a Priority
If you are running either of Carbon Black’s on-premise products CB Response & CB Protection, you are already seeing the benefits of a strong endpoint security solution. With something this effective already in place, why would you need to consider moving to a cloud platform? The answer is twofold...
Partner Perspectives: Awake Security and Carbon Black Deliver Comprehensive Threat Detection and Response
Rudolph Araujo is the Vice President of Awake Security. Even relatively unsophisticated attackers today use tools, tactics and techniques that make them difficult to uncover. For instance, the use of non-malware tools, such as PowerShell, psexec and Python, places a burden on security teams to...
QSC18 Virtual Edition: Vulnerability Risk Management
When vulnerability risk management is proactive, organizations don’t have to hurriedly react to attacks that exploit bugs for which patches are available, as happened with WannaCry. “The vast majority of WannaCry remediation took place as an emergency type process,” Jimmy Graham, a Qualys Directo...